skills.rest
eriklieben
erikliebenCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

dev-security-backend

Audit ASP.NET Core and EF Core backends against OWASP Top 10:2025.

7|3|Updated Mar 19, 2026
Search Tags:#security#owasp#backend#compliance#dotnet#aspire
One-click install
npx skills add https://github.com/eriklieben/agentic-dev-workflow --skill dev-security-backend
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: dev-security-backend
Source: https://github.com/eriklieben/agentic-dev-workflow/tree/main/.claude/skills/dev-security-backend
Command: npx skills add https://github.com/eriklieben/agentic-dev-workflow --skill dev-security-backend

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the critical need for consistent, automated security oversight in C#/.NET backend development, preventing common vulnerabilities like SQL injection, broken access control, and secret leakage.

Core Features & Use Cases

  • Comprehensive Security Auditing: Validates code against OWASP Top 10:2025 standards, including secrets management, input validation, and secure logging.
  • Runtime Security Analysis: Integrates with Aspire to detect leaked error details, authentication failures, and CORS misconfigurations in real-time.
  • Use Case: Before a production deployment, run this skill to verify that all API endpoints are properly authenticated, secrets are stored in Key Vault, and no sensitive data is being leaked through error responses.

Quick Start

Invoke the dev-security skill with the full flag to perform a comprehensive security review of your current backend codebase.

Frequently Asked Questions about dev-security-backend

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my ASP.NET Core backend for OWASP Top 10 compliance?▼

Check OWASP Top 10 compliance in ASP.NET Core by running an automated security audit that validates code against critical areas including secrets management, input validation, and SQL injection prevention.

How do I prevent secret leakage in .NET backend applications before deployment?▼

Prevent secret leakage in .NET backends by using automated scanning to verify secrets are stored in Key Vault and validate that no sensitive data is exposed through error responses or logs.

Can I detect CORS misconfigurations and authentication failures in real-time with .NET Aspire?▼

Yes, detect runtime security issues like CORS misconfigurations and authentication failures in real-time by integrating .NET Aspire runtime log analysis with static code review for comprehensive monitoring.

What is the best way to automate SQL injection prevention checks for EF Core?▼

Automate SQL injection prevention checks for EF Core by running a static code review security suite that validates input validation and queries against hardened backend security standards.

Does this security scanning suite work with C# backend applications using EF Core?▼

Yes, this security scanning suite is specifically designed for C# backend applications using ASP.NET Core and EF Core, providing automated static code review and runtime log analysis.

How do I verify API endpoints are properly authenticated in ASP.NET Core?▼

Verify API endpoints are properly authenticated in ASP.NET Core by running a pre-deployment security review that checks access controls, runtime authentication failures, and secure logging configurations.

Related Skills

Explore More Software Engineering Skills→
Thiago-Cruz-engThiago-Cruz-eng

dotnet-api

Design ASP.NET Core backend APIs with best-practice guidance for endpoints, security, and resilience.

Community
Advanced
erikliebeneriklieben
7

dev-security

Automate OWASP Top 10:2025 security reviews for .NET and Angular applications.

Community
Advanced
act70255act70255

secrets-management

Store, rotate, and retrieve secrets in CI/CD pipelines.

Community
Intermediate
xin-laixin-lai
56

pre-commit-validation

Validate staged Aspire .NET code, runtime logs, and Playwright login flows.

Community
Intermediate